hyperlocal-weather-precip

Warn

Audited by Socket on May 19, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS leaning benign: the weather functionality is coherent, and the Gooseworks install/auth flow appears officially documented, but the skill reads raw local credentials and routes all API calls through Gooseworks proxy endpoints instead of the underlying weather service. The main risk is intermediary credential/data handling and transitive trust in the Gooseworks platform, not clear malicious intent.

Confidence: 86%Severity: 58%
Audit Metadata
Analyzed At
May 19, 2026, 07:19 AM
Package URL
pkg:socket/skills-sh/gooseworks-ai%2Fgoose-skills%2Fhyperlocal-weather-precip%2F@21664969089efe5ebe01f86bd0abe3e5b57b3771
Security Audit — socket — hyperlocal-weather-precip